definition user {}

definition district {
  relation admin: user
}

definition site {
  relation district: district
  relation site_admin: user
  permission can_view_site = site_admin & district->admin
}